Relative Content

Tag Archive for apiresthttpsecuritytesting

Internal API invocation: best practices in regarding of security concerns

I have a microservice that exposes public API (in this case, HTTP API). Also, we have a bug a production that occurs only for newly registered users. So, QA engineer asks me to add internal endpoint (it is available only for test runners but not the outside world) that deletes the user from the database. It’ll help to reproduce the error and investigate what it causes.